dedicated ollama user/group

This commit is contained in:
2026-06-24 14:04:09 -07:00
parent 275176b80f
commit db96bd1ac7

View File

@@ -17,6 +17,8 @@
services.ollama = { services.ollama = {
enable = true; enable = true;
acceleration = "vulkan"; acceleration = "vulkan";
user = "ollama";
group = "ollama";
}; };
# straylight is the unikernel host. The shared mcp.nix locks the agent # straylight is the unikernel host. The shared mcp.nix locks the agent
# down with PrivateDevices=true, which hides /dev/kvm and /dev/net/tun. # down with PrivateDevices=true, which hides /dev/kvm and /dev/net/tun.